Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: w4vlF9dSHu2x57BuX0CxmZ1dzn4PXWvelvBvwwHAAUc=
Subject key identifier: 0B:F7:8E:41:94:D3:60:5E:1C:00:A9:D1:F5:D6:87:ED:D2:A1:EC:EC
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 019D996312CCDFB8771FDFB9A830D6754E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 03:01:40 +0000
Manifest this update: Fri 17 Apr 2026 03:01:40 +0000
Manifest next update: Sat 18 Apr 2026 03:01:40 +0000
Files and hashes: 1: 7yu1vZA6sQopFbJ477QSAd_T4No.roa (hash: y294/GuVma254ox9Je2JWpyy0Aod0Bh8Uh2WyhLyqks=)
2: AOST2v0fOQI-ty-pWahAGdkHAEs.roa (hash: jxMvz/MnFmWAmclh3cHyqmlZEVpCA/u6934edlXvIDs=)
3: v92-Eaw03d123_02nzbPzAiBgtc.roa (hash: EG21x+MWDXMZMqTlMifEMC9yWAbNwFpO2h6QDrwu7Io=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: KXcTY2g6VmerDN0qrEOd3fuUpigTYSEKMKfafvRrNa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:12:cc:df:b8:77:1f:df:b9:a8:30:d6:75:4e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Apr 17 03:01:40 2026 GMT
Not After : Apr 18 03:01:40 2026 GMT
Subject: CN=0bf78e4194d3605e1c00a9d1f5d687edd2a1ecec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0a:e6:32:a9:8b:1f:f3:70:1a:a0:c8:05:ab:
b7:9e:49:15:7d:a3:e8:b6:5a:4f:c5:d8:21:19:db:
07:8e:11:d4:52:b2:11:17:af:98:e1:4f:08:38:f1:
fc:dd:11:f1:ff:c9:f6:8e:6b:09:bd:37:9b:c7:02:
c5:55:e6:8e:1f:8b:d0:b5:ae:90:21:9a:91:fc:05:
db:3c:aa:64:bb:8c:73:22:4a:be:c0:7c:dd:cc:a2:
75:67:1b:67:1a:2a:dd:bb:83:14:2b:ca:31:4c:d5:
e5:4e:c9:19:f2:b0:c2:e3:08:f1:18:9f:73:61:79:
4e:52:08:72:5c:e5:f3:6f:9e:de:ad:90:57:dc:f7:
95:50:a8:6f:ea:79:42:5a:48:7c:73:7f:a8:f9:40:
d6:45:75:c8:73:a3:05:a9:e9:98:25:be:3b:ec:58:
c3:d1:e4:fe:00:e7:2f:7e:e1:64:ee:a3:f5:c0:f3:
23:e4:85:4d:00:28:95:1c:a4:39:75:98:53:79:45:
11:0d:82:d6:88:0c:fb:a4:76:3c:5e:bb:dd:4d:88:
9d:af:c9:74:48:67:98:b8:4d:0c:19:5d:c1:c9:da:
e6:fc:4b:e5:fe:d9:58:53:ea:12:59:f1:2b:ce:bc:
86:e4:b9:6a:98:30:b8:1f:b5:da:8a:3e:43:10:a7:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F7:8E:41:94:D3:60:5E:1C:00:A9:D1:F5:D6:87:ED:D2:A1:EC:EC
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2a:e0:1a:3a:c5:60:7c:ab:cf:7d:df:77:88:10:e1:89:1d:
1b:09:a7:b5:5d:c0:de:9f:14:20:c7:99:64:0e:1b:48:15:f3:
88:b3:5b:88:47:a5:da:c4:0a:3c:98:ce:2f:67:df:13:98:50:
d9:5c:f9:92:a9:c8:e4:5a:5e:f6:4b:8a:ef:58:48:27:17:f5:
83:42:e7:63:84:ec:61:e7:f8:88:3f:db:82:ad:e1:c2:77:43:
87:30:d6:c0:a1:21:20:58:38:95:17:40:77:65:77:a1:e6:bc:
7a:1f:65:1e:47:bc:43:1e:68:2c:b9:b4:61:b4:13:1b:53:bf:
2a:5f:66:07:e4:c4:8e:eb:ab:e9:b3:84:25:4c:5f:76:37:83:
23:83:46:6b:b5:f3:e0:95:74:05:39:91:71:12:7f:7b:82:31:
fd:11:ce:6c:bc:bf:e2:69:14:68:f1:94:ec:c7:d9:74:a5:26:
74:a9:da:7b:ac:53:b8:b1:64:35:bf:f5:79:b2:bb:ba:72:79:
36:e1:b9:c2:8a:cf:af:5a:c7:96:59:38:ab:c8:77:7a:43:01:
ee:da:e7:96:6a:92:b3:52:11:eb:cc:d2:51:37:72:cf:05:4c:
a0:e1:bb:71:10:22:62:39:09:3d:c5:29:9c:02:8d:16:53:de:
95:32:2c:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYxLM37h3H9+5qDDWdU6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZDhjMTk4NWM1MGM3ZWFkNGNmZDhkM2E5M2Q2M2U1NjEx
ZjZmYjYwHhcNMjYwNDE3MDMwMTQwWhcNMjYwNDE4MDMwMTQwWjAzMTEwLwYDVQQD
EygwYmY3OGU0MTk0ZDM2MDVlMWMwMGE5ZDFmNWQ2ODdlZGQyYTFlY2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ArmMqmLH/NwGqDIBau3nkkVfaPo
tlpPxdghGdsHjhHUUrIRF6+Y4U8IOPH83RHx/8n2jmsJvTebxwLFVeaOH4vQta6Q
IZqR/AXbPKpku4xzIkq+wHzdzKJ1ZxtnGirdu4MUK8oxTNXlTskZ8rDC4wjxGJ9z
YXlOUghyXOXzb57erZBX3PeVUKhv6nlCWkh8c3+o+UDWRXXIc6MFqemYJb477FjD
0eT+AOcvfuFk7qP1wPMj5IVNACiVHKQ5dZhTeUURDYLWiAz7pHY8XrvdTYidr8l0
SGeYuE0MGV3Bydrm/Evl/tlYU+oSWfErzryG5LlqmDC4H7Xaij5DEKfb8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAv3jkGU02BeHACp0fXWh+3SoezsMB8GA1UdIwQY
MBaAFMTYwZhcUMfq1M/Y06k9Y+VhH2+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83N2Q2MDctN2Q3Yy00NTg5LWFmZjct
MmZkYTk3MDc5YzAxLzEveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83N2Q2MDctN2Q3Yy00NTg5LWFmZjctMmZkYTk3MDc5YzAx
LzEveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSrgGjrF
YHyrz33fd4gQ4YkdGwmntV3A3p8UIMeZZA4bSBXziLNbiEel2sQKPJjOL2ffE5hQ
2Vz5kqnI5Fpe9kuK71hIJxf1g0LnY4TsYef4iD/bgq3hwndDhzDWwKEhIFg4lRdA
d2V3oea8eh9lHke8Qx5oLLm0YbQTG1O/Kl9mB+TEjuur6bOEJUxfdjeDI4NGa7Xz
4JV0BTmRcRJ/e4Ix/RHObLy/4mkUaPGU7MfZdKUmdKnae6xTuLFkNb/1ebK7unJ5
NuG5worPr1rHllk4q8h3ekMB7trnlmqSs1IR68zSUTdyzwVMoOG7cRAiYjkJPcUp
nAKNFlPelTIsFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:15 2026 by rpki-client